Behavioral task
behavioral1
Sample
70328f0b07f793d22e15b832f767a053.exe
Resource
win7-20231215-en
General
-
Target
70328f0b07f793d22e15b832f767a053
-
Size
784KB
-
MD5
70328f0b07f793d22e15b832f767a053
-
SHA1
b3fdb4084f4c14a4c1b95084b56ff431e0894ce2
-
SHA256
45c090d6c4a03059f422ce91f807b7017974366a0c9758bcb5ce13fe90b2c56e
-
SHA512
1ff0b53e1a9937262d46060a446e2657161f454cdc195a06ed938c117f95e93a9798790b7ce99489a22a05485651ee0eb5cc855957a3dd99a4f5242c9faf3844
-
SSDEEP
24576:RKr3ABEz3RIzsEHuCqzHTHdpDN5VRGIbkBt9jd/a2:ZCzBicTHdpjVRzMjh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70328f0b07f793d22e15b832f767a053
Files
-
70328f0b07f793d22e15b832f767a053.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE